Cloud Security Specialist - Remote

Dice is the leading career destination for tech experts at every stage of their careers. Our client, VIVA USA INC, is seeking the following. Apply via Dice today!Title: Cloud Security Specialist - RemoteMandatory skills:cloud solutions, cloud control implementation, cloud environments, cloud architectures, cloud technologies, cloud servicesimplementing systems, FedRAMP, FISMA, SOX compliantFedRAMP reporting requirements, risk assessments, Plan of Action and Milestones, POA&M, remediation plansgovernment compliance, RMF, CSF, Privacy Act, OMB requirements, Office of Management and Budgetproject management methodology, information security compliance, security architecturessubject matter experts, SMEs, Technical Services, continuous monitoring programDescription:BACKGROUND:The client seeks an experienced individual to provide services in support of the continuous monitoring of FedRAMP authorized cloud solutions. We are looking for an experienced information security specialist to work directly with cross-division subject matter experts (SMEs) and provide insight, advice, support, and recommendations to ensure the success of the continuous monitoring process, with a targeted focus in FedRAMP, FISMA,Privacy Act, and OMB requirements. The selected individual shall have experience successfully reviewing FedRAMP continuous monitoring packages and advising on secure cloud control implementation. The successful candidate shall be adept at working collaboratively in a consensus-based environment while serving as an individual contributor who develops information security related work products.REQUIREMENTS:The candidate shall possess the knowledge and skills of - Cloud Security Specialist, with specific focuses on the below knowledge and experience:The candidate shall also demonstrate the below knowledge and experience:Bachelor s degree or higher in information security, or a related field or equivalent experienceAt least one advanced cybersecurity certification such as: CISSP, CCSP, CRISC, or other relevant security certifications; multiple are preferredAt least seven (7) years of information security experience, including cloud security and continuous monitoring activitiesExtensive NIST experience: NIST SP 800-30 rev 1, 800-37 rev 1 or 2, 800-53 rev 5, 800-60 Vol 1 rev 1 & 2 rev 1, and 800-171 rev 3Experience with implementing systems in a FedRAMP, FISMA, and SOX compliant environmentProven ability to forge consensus and work collaboratively, without positional authority,to influence stakeholder groups in different hierarchical structuresDemonstrate strong project execution and project management capabilitiesExperience with FedRAMP reporting requirements, including but not limited to, risk assessments, Plan of Action and Milestones (POA&M), and remediation plansPreferred Knowledge and Experience:Experience with government compliance, including client requirements, FISMA,FedRAMP, RMF, and CSFExperience with cloud environments, architectures, technologies, and servicesFedRAMP experience and certificationAdvanced knowledge and experience with project management methodology,information security compliance, and implementation of security architectures and related standardsKnowledge of the laws and regulations governing information security and complianceExcellent communication skills (verbal and written), and able to adjust to changing priorities and customer needsStrong interpersonal and organizational agility skills. Must be able to deal effectively with all levels of management and staffDetail-oriented and committed to excellent customer serviceThe Contractor shall deliver, but not limited to, the following:Review current continuous monitoring program and provide recommendations for improvementConduct monthly client RAMP continuous monitoring package analysis, this includes reviewing deviation requests and POA&Ms as well as documenting a summary for the client.Advises clients on FISMA/RAMP compliance activities while staying current with the legislation, and National Institute of Standards and Technology (NIST) and Office of Management and Budget (OMB) requirements.Conducts security risk assessments for third party applications and service providers.Ensure organizational structure recommendations integrate cohesively into the overall client strategic direction and are in alignment with other high- priority work across the division.Identify and help plan for long-term financial considerations due to cloud migration and business transformation.Review and advise on post implementation de-commissioning scheme for legacy applications, as well as migration and maintenance of historic data.Review additional process and procedures and make recommendations for improvement to the clientProvide ad-hoc support services. The client requires the specialist to support some unexpected and ad-hoc tasks associated with planning and executing the system implementation.These services may include but are not limited to advisory consulting services for client leaders, facilitating strategic meetings or working sessions, and reviewing and opining on the client system documentation.VIVA USA is an equal opportunity employer and is committed to maintaining a professional working environment that is free from discrimination and unlawful harassment. The Management, contractors, and staff of VIVA USA shall respect others without regard to race, sex, religion, age, color, creed, national or ethnic origin, physical, mental or sensory disability, marital status, sexual orientation, or status as a Vietnam-era, recently separated veteran, Active war time or campaign badge veteran, Armed forces service medal veteran, or disabled veteran. Please contact us at for any complaints, comments and suggestions.Contact Details :Account co-ordinator: Ganesh P, Phone No: Extn: 228 , Email id:VIVA USA INC.3601 Algonquin Road, Suite 425Rolling Meadows, IL 60008| ;/p>